Cisco Security
This subtopic provides learners with the essential knowledge and practical skills to secure network infrastructures using Cisco technologies. It covers core security principles such as confidentiality, integrity, and availability, alongside hands-on configuration of firewalls, access control lists (ACLs), and secure device management. Learners will also explore ongoing maintenance procedures, ensuring networks remain resilient against evolving threats.
Assessment criteria
Topic Overview
The City & Guilds Level 3 Diploma in ICT Professional Competence is a vocational qualification designed to equip students with the practical skills and theoretical knowledge needed for a career in ICT. It covers a broad range of topics including network infrastructure, database management, web development, cybersecurity, and project management. This diploma is recognised by employers and universities, providing a solid foundation for roles such as IT support technician, network administrator, or software developer.
Unlike purely academic qualifications, this diploma emphasises hands-on, real-world application. You will engage in practical tasks such as configuring networks, designing databases, and developing websites, often using industry-standard tools and software. The course also develops essential professional skills like problem-solving, communication, and teamwork, preparing you for the demands of the ICT workplace.
This qualification is structured around mandatory and optional units, allowing you to tailor your learning to your interests and career goals. It is assessed through a combination of practical assignments, projects, and online tests. Mastering this diploma demonstrates to employers that you have the competence to handle ICT tasks effectively and can adapt to evolving technologies.
Key Concepts
Core ideas you must understand for this topic
- →Network fundamentals: Understanding IP addressing, subnetting, routing, switching, and network topologies (e.g., star, mesh).
- →Database design and SQL: Creating relational databases, normalising data, and writing queries using SELECT, JOIN, and subqueries.
- →Web development: Building responsive websites using HTML5, CSS3, and JavaScript; understanding client-server architecture.
- →Cybersecurity principles: Identifying threats (e.g., malware, phishing), implementing security measures (firewalls, encryption), and following best practices.
- →Project management: Applying methodologies like PRINCE2 or Agile to plan, execute, and review ICT projects.
Learning Objectives
What you need to know and understand
- Understand the principles of network infrastructure security, Be able to configure a secure network infrastructure, Be able to maintain a secure network infrastructure
- Understand the principles of network infrastructure security, Be able to configure a secure network infrastructure, Be able to maintain a secure network infrastructure
Assessment Criteria
Key criteria assessors look for in your portfolio
- Award credit for explaining the principles of network security (e.g., CIA triad) with reference to Cisco implementation.
- Demonstrate correct configuration of standard and extended ACLs on Cisco routers, including verification of filtering rules.
- Show ability to secure Cisco device access by configuring encrypted passwords (e.g., enable secret) and disabling unused services.
- Perform a systematic backup and restoration of Cisco IOS and configuration files as part of maintenance routines.
- Identify common network security threats and vulnerabilities.
- Explain how firewalls, VPNs, and access controls enhance security.
- Configure basic security settings on network devices.
- Describe procedures for maintaining network security over time.
Assessment Guidance
Guidance for achieving higher grades
- 💡During practical assessments, use the 'show access-lists' command frequently to verify that ACLs are functioning as intended.
- 💡Always change default credentials and apply minimum necessary privilege levels when configuring user accounts on Cisco devices.
- 💡For maintenance tasks, schedule updates during off-peak hours and always have a rollback plan in case of issues.
- 💡Use real-world examples to illustrate security principles.
- 💡Practice configuring a simple firewall rule set.
- 💡Ensure you understand the difference between symmetric and asymmetric encryption.
- 💡In practical assessments, always document your steps and justify your choices. For example, when setting up a network, explain why you chose a particular IP scheme or security setting. This shows deeper understanding.
- 💡For database tasks, ensure your tables are normalised to at least 3NF unless the scenario explicitly allows denormalisation. Examiners look for efficient, logical designs.
- 💡In web development, test your site across multiple browsers and devices. A common mistake is only testing in one environment, leading to layout or functionality issues.
Common Mistakes
Common errors to avoid in your coursework
- Confusing standard ACL numbering (1-99) with extended ACL numbering (100-199) leading to incorrect ACL application.
- Forgetting to apply access lists to interfaces with the correct direction (in/out), rendering them ineffective.
- Leaving telnet enabled; failing to configure SSH for secure remote management.
- Not saving the running configuration to startup configuration (write mem) after changes, causing loss of settings on reboot.
- Confusing authentication with authorisation.
- Neglecting to consider physical security as part of network security.
- Overlooking the importance of regular updates and patches.
- Misconception: 'Networking is just about connecting cables.' Correction: Networking involves complex protocols (TCP/IP, DNS, DHCP), security configurations, and troubleshooting logical issues, not just physical connections.
- Misconception: 'Database normalisation is unnecessary for small projects.' Correction: Normalisation reduces data redundancy and improves integrity, which is crucial even in small databases to avoid anomalies.
- Misconception: 'Cybersecurity is only about antivirus software.' Correction: Cybersecurity encompasses policies, user training, network segmentation, access controls, and incident response plans.
Frequently Asked Questions
Common questions students ask about this topic
Pass / Merit / Distinction Evidence Checklist
How your portfolio evidence is graded for CITY & GUILDS LIMITED Cisco Security
Every vocational unit is marked against named criteria rather than an exam percentage. Your tutor's brief lists the exact codes for this unit — here is what each band is asking you to do.
Demonstrate baseline knowledge, accurate terminology, and core practical application.
Provide detailed analysis, structured explanations, and clear workplace reasoning.
Deliver thorough evaluation, original problem solving, and fully justified recommendations.
Before You Start
Prior knowledge that will help with this topic
- •Basic computer literacy: Familiarity with operating systems (Windows/Linux), file management, and common software applications.
- •Fundamental mathematics: Understanding of binary, hexadecimal, and basic algebra for subnetting and data representation.
- •Communication skills: Ability to write clear reports and explain technical concepts to non-technical stakeholders.
Coursework AI Review
Paste your assignment brief and check your draft against its P/M/D criteria
Key Terminology
Essential terms to know
- Understand the principles of network infrastructure security, Be able to configure a secure network infrastructure, Be able to maintain a secure network infrastructure
- Understand the principles of network infrastructure security, Be able to configure a secure network infrastructure, Be able to maintain a secure network infrastructure
Ready to learn?
AI-powered learning tailored to this unit